Techy: Test Credit and Debit Card Numbers

I’ve been working on an e-commerce system recently (as you may have been able to guess) and to test the credit card integration side of things, I needed some test credit card details of “valid looking” card numbers…

I eventually managed to gather 102 card numbers which passed validation: i.e. the Bank Identification Number [BIN] / Issuer Identification Number [IIN] numbers [the first 7 digits] matched up with the “alleged” card type and the whole card number passed the Luhn algorithm validation.

I must emphasis, before I get thousands of comments, these are TEST credit card numbers and are NOT VALID (I did not get as far as validating that they were theoretically assigned to a bank: just that they were theoretically assigned to a card issue): they are intended to test code in development to ensure that the code recognises the card type correctly and the Luhn algorithm is correct. You should, therefore, be able to use any expiry date or CCV/CSC you like for testing.

You can download these credit card numbers in a BSD released PHP file to make it easier to test with if you wish.

The developmental test card numbers are after the jump (along with details of the original sources):

Remember these are test credit card numbers and debit card numbers and are intended to validate that your development code correctly identifies the card types and validates the card. They are NOT real card numbers.

Related

This post is over 6 months old.

This means that, despite my best intentions, it may no longer be accurate.

This blog holds over 12 years of archived content - during that time, I may have changed my opinion of something, technology will have advanced (and old "best standards" may no longer be the case), my technology "know how" has improved etc etc - it would probably take me a considerable amount of time to update all the archival entries: and defeat the point of keeping them anyway.

Please take these posts for what they are: a brief look into my past, my history, my journey and "caveat emptor".

The Card Security Code [CSV] (also known as the Card Verification Value [CVV]) for the cards above are whatever you want them to be as these numbers are intended for testing usage only (from the post: “You should, therefore, be able to use any expiry date or CCV/CSC you like for testing.”). If you try and use these numbers “in real life”, they won’t work.

What works? These credit/debit card numbers will only work for testing purposes – they won’t work for real purchases (unless all the merchant is doing is checking the card number passed the checksum test: if that’s all they are doing, well, then it’s their own fault – as a card number may be valid, but the card has actually expired, be a non-existent account, be reported stolen etc etc)

It will depend on how the website performs the validation. If it only checks that it “looks like” a valid credit card number (which is unlikely), then they’ll work. If, however, they put a “nominal $1 hold” on the card to actually check it is really valid, then these will fail (this is the most common way of checking if the card is valid: the customer doesn’t actually see the funds disappear as they are just “held” for 3-4 days and the website doesn’t actually “commit” the charges).

Feel free. Like I’ve said multiple times before in this post: these are test card details – i.e. not real ones – they do not have an expiry dates, start dates or CVV numbers and you cannot make purchases with them.

Of course, I’m sure the Metropolitan Educational Council in Ohio would be interested to know how your are wasting your time…

No, these test numbers will NOT work on any pay site which actually attempts to take payment. They are intended to be used for testing ecommerce systems which need to identify credit card numbers correctly.

If you are using these test credit and debit cards for testing purposes, you can make up the security number (also known as the CVV – Card Verification Value – or CV2 number) as it won’t matter. However, if you are planning on trying to use these card numbers to actually buy something, you can supply any CVV number you like: as they are all test card numbers and won’t work in real situations.

pls i need a vredit card that i can alway use to purchase little little things online and also do certain registrations online. Pls if u can be of help just send the information of the CC to me. Please i’m desperate

You’ll need to sign up for a credit card for your local bank (or another issuer) to get one that works. Most shops now sell “pre-paid ‘credit cards'” which you can buy “over-the-counter” with a set amount of money. If you buy the cheapest, this may be enough for any online registrations you may need (especially if they just want to verify that you have a credit card and not actually make a charge to it).

good day sir,
How are you doing i appreciate the good card numbers you publish in your site please can you help me with the cvv2 and other credit generator so i can be having a constant credit for anything am doing.

If you need constant credit, then please apply for a proper credit card (I’m sure there are some adverts on this page for credit card providers such as Citibank, MBNA, American Express etc). These numbers are just test numbers and will not work. CVV2 numbers are generated by the credit card issuer (such as Barclays, Lloyds, MBNA etc) using the “primary account number” (PAN) number of the credit card account, the credit card number and the issuer’s private key (which they keep very very secure).

In theory, since there are only 1,000 possible combinations, you could try and “guess” the CVV2 number for these credit cards, but it won’t do you any good as the card numbers are not real and so the bank would reject any transactions on them anyway.

The four digit security code/number for American Express (AMEX) cards can be found on the front of the card on the right hand side (underneath the last four digits of the card number). This differs from Visa and Mastercard cards which have a three digit number printed on the signature slip.

hello sir,
i have the first four numbers of a credit card with its expiry date i need to generate the remaining twelve help me by give me a site that can perform this task. otherwise a good advice on what to do.reply

It can’t be done: the first 4 digits of the card just indicate which bank/brand of card it is – if it starts with a “4” it’s a “Visa” card etc etc. If you’ve got the first 8 digits and the last 4 four digits – meaning you only need to guess at 4 digits: you can then use the check digit to reduce the number of possibilities down from 1,000 to 100: but it’s still quite high.

Knowing the expiration date is only useful if the bank that issues those cards has issued them in consequetive order – meaning if you know the expiration date of one card, you may then be able to guess at another: however, the card brands (such as Mastercard and Visa) “frown” upon issuing card numbers in a guessable manner like this.

If you need to work out the CVV number, you’ll need the credit card number, the “Primary Account Number” (PAN) – usually the same as the first credit card number, the expiration date and, most importantly, the encryption certificate from the issuing bank for that card. However, the banks, for obvious reasons, keep the certificates really really safe and change them reasonably regularly (usually every “batch” of cards). It’ll probably be best for you just to apply for a Mastercard card from your local bank.

No – you’ll need to get a valid credit or debit card: the easiest (and only legal way) would be to apply to your local bank or building society (you should be able to get a list of “card issuers” from http://www.visa.com or http://www.mastercard.com for your local country) and they’ll issue you details which can then be used on paysites.

Hey, for the code 6011 0000 0000 0004 for the discover card, what is the security code for it? Because I need it, not to purchase anything, but to make a simple account on iTunes. So that I could get free APPs on my ipod.

You can use any security code (also known as the CVV code) you want for these test credit card numbers: however, they are intended to be used by developers testing their applications. If I remember correctly, I think that when you sign up using iTunes, Apple make a small “pre-reserve” charge on the credit/debit card provided (something such as $1) which times out after 3 days or so (i.e. the money isn’t actually debited from your account). However, this process will fail if used with test card details. Many shops now sell “pre-paid” Visa/Mastercard cards which you can put a small amount of money (such as $10) on to use for authentication.

hey Richy C can i have a valid credit card number plus the validity date with the csc number ? i woud like to get chips for my facebook using my paypal account.. can you help me ? hope to hear from you soon

Yes certainly – you’ll need to contact your local bank or building society and ask them to issue you with a Visa or Mastercard. Alternatively, contact American Express so they can sign you up for an Amex card. Those are the only (legal) ways to get valid credit card details. I am not telling anybody how to conduct illegal activities (such as illegally using a third parties credit card account).

That’s exactly what I composed this list for: I needed to test e-commerce checkout facilities myself and needed a large range of numbers to test against and I just got fed up with looking in multiple places.

Yes, the questions do get a little bit irritating (I’ve not allowed around 50% of the comments to be posted!), but the way I see it is they come here looking for credit or debit card details and I’ve got Google Adwords running advertising credit/debit card services: hopefully that should attract sufficient funds to make the hassle of reply worth it (even if it’s just a few pounds per quarter).

There is an algorithm to calculate the CVV/CSC numbers for credit/debit cards, however you’ll need the primary account number (PAN) of the card, the expiration date, and the card issuer’s private key for that range of card numbers. You’ll find the banks and card issuers keep their private keys very very secure – and for good reason. You can find a bit more information on the IBM Application Programmers Guide here and here – although without the private keys, the information is nearly useless except for educational purposes.

i would like someone to give me valid creditcard numbers along with ccv/ cvv and expiry i will pay the person half the amount that will be charged on credit card regardless even if the payment gets reversed u still will get ur share.. reply me at [email address removed]

Let me get this right, you are going to be taking stolen card numbers off people and then, perhaps, give them 50% of the funds you get. No guarantee there and there’s nothing stopping the original theft from doing all the work themselves for all the profit…. Please go paddle your scams elsewhere.

Thanks for the insight on generating test numbers for validating ecommerce applications.

I know you weren’t shooting for comedy, but I laughed uproariously at the comments. I thought they were trolls at first. Sadly, I fear they’re serious.

That means you have the patience of a saint.

But in your next post, please tell us all how to generate ccv’s so we can help the widow of a Nigerian bank official claim her husband’s stolen money (while shopping for incidentals and internet porn).

Certainly – CVV numbers can be easily produced by holding up a copy of the card number printed at 14pt Arial on 80gsm paper at a 45 degree towards the Moon when it is at an inclination of no more than 23 degrees from the horizon and when the moon is in the eighth house of Aquarius.

hi rich c. i just want to ask, do u have any idea on how to know the expiry date if i know the credit card number, security, and card holder? but i dont know only the expiry date.. pls reply.. thanks..

The situation I find myself in is like this: People will say ‘come to my website, I will give you free stuff’, so I think to myself “hey, I have time, let’s check it out”. Once you get there it asks you to register, part of that is entering a credit card number (now of course a bell goes off in my head about the guy being a scammer), being somewhat short on money, you can see how I would be reluctant to just give away my CCN, even if these people have a pretty website and an official looking EULA.
my question (well, I suppose, my second question) is: is there anything I can provide these people that looks like a credit card but isn’t (I wouldn’t want them to steal someone else’s money either, you know, I just want my free stuff as advertised)

What sort of integration are you looking at testing? Testing with Barclay’s payment service or checking that a Barclay debit card is recognised by your system? If it’s the latter, then I believe Barclay’s “BIN” numbers are 4539 78, 4659 22, 4906, 4929 40, 4929 42, 4929 46, 4976 52, 5136 24, 5140 21, 5148 89, 5301, 5425 (source Wikipedia) so if you recognise those, you should be good.

dude how the hell are there so many dumb ass questions? and they are all the same “can you get me card details to buy things?” or “how do we get the cvv” its like they are not even reading your post… you say these details will NOT work over and over and over yet they still ask… wtf is with these retards? They must be 15 year olds trying to become some kind of l33t hacker… Idk how you put up with this man i would be so annoyed

The first digit is the industry identifier (4 and 5 are reserved for financial insitutitons hence why the majority of debit/credit cards start with either a 4 or 5), then you have 6 digits of the Issuer Identification Number (formerly the BIN number) – 7 digits in total: however, usually the first 4 digits are enough to match up the “card type” (such as Visa, Mastercard, Switch etc etc).

I certainly have a collection of real credit and debit card numbers – strangely enough I have them embossed in rectangular pieces of plastic – so what sort of legal business were you suggesting and what benefits would it have for me?

hello i was woundering i have this account on dragonquest and i need this necklice thing to were but it says i need a credit card number and a Security Code and the Expiration Date
and i rely rely want the necklice on dragonquest but i dont know what to dooo plzzzzzzz plzzzz help me

I have a magnetic stripe card machine and just out of curiosity, when a card is swiped/read through the reader it shows the number on the front of the card, an equal sign, then another long number after that. What is that secondary number (after the equal sign and what does it represent? (ex: 482866957826wxyz=1309256942573658)

That’s a good question! I do know that’s a Visa Debit card issued by Wachovia Bank (just by the first 6 digits) – the second batch of numbers is either the transaction or approval code for that purchase: however, this may differ depending on the card swipe machine. This number should allow the merchant to immediately lookup the transaction if you later have a query with the payment.

It doesn’t look like any of the information which is encoded within the magnetic swipe of the card (see Wikipedia’s article on ISO/IEC 7813 for more information).

Well Mr. Richy, can you provide me a valid credit card no. with security code and expiration date?
It will be very nice of you so that i could prevent myself from being kicked out of my rented house. Thanks in Advance.

I can’t – but contact your bank/building society and they’ll be able to help with a credit/debit card. If you are having trouble paying your mortgage or rent, let your mortgage company/landlord know: they may be able to work something out with you. If that doesn’t help, then contact your local financial authority or similar (such as the Citizens Advice Bureau) and let them know you are suffering financial hardship which could result in you becoming homeless.